<div class="container">
<h1>Security update for expat</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-SU-2026:4623-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2026-10-12T07:27:51Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>important</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1249584">bsc#1249584</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1257144">bsc#1257144</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1257496">bsc#1257496</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1259711">bsc#1259711</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1259726">bsc#1259726</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1259729">bsc#1259729</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1262263">bsc#1262263</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1264713">bsc#1264713</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1267631">bsc#1267631</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268572">bsc#1268572</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268573">bsc#1268573</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1275115">bsc#1275115</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1275594">bsc#1275594</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1275732">bsc#1275732</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1275859">bsc#1275859</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1275860">bsc#1275860</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1275915">bsc#1275915</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1282347">bsc#1282347</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1283493">bsc#1283493</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1284334">bsc#1284334</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/PED-16154">jsc#PED-16154</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>
Cross-References:
</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2016-0718.html">CVE-2016-0718</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2016-9063.html">CVE-2016-9063</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2022-43680.html">CVE-2022-43680</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2023-52425.html">CVE-2023-52425</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2024-8176.html">CVE-2024-8176</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2025-59375.html">CVE-2025-59375</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-102633.html">CVE-2026-102633</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-24515.html">CVE-2026-24515</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-25210.html">CVE-2026-25210</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-32776.html">CVE-2026-32776</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-32777.html">CVE-2026-32777</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-32778.html">CVE-2026-32778</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-41080.html">CVE-2026-41080</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-45186.html">CVE-2026-45186</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-50219.html">CVE-2026-50219</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-56131.html">CVE-2026-56131</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-56132.html">CVE-2026-56132</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-56403.html">CVE-2026-56403</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-56404.html">CVE-2026-56404</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-56405.html">CVE-2026-56405</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-56406.html">CVE-2026-56406</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-56407.html">CVE-2026-56407</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-56408.html">CVE-2026-56408</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-56409.html">CVE-2026-56409</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-56410.html">CVE-2026-56410</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-56411.html">CVE-2026-56411</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-56412.html">CVE-2026-56412</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-66046.html">CVE-2026-66046</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-72522.html">CVE-2026-72522</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-76641.html">CVE-2026-76641</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-76956.html">CVE-2026-76956</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-76957.html">CVE-2026-76957</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-77214.html">CVE-2026-77214</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-93990.html">CVE-2026-93990</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>CVSS scores:</th>
<td>
<ul class="list-group">
<li class="list-group-item">
<span class="cvss-reference">CVE-2016-0718</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">9.8</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2016-0718</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">9.8</span>
<span class="cvss-vector">CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2016-9063</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">9.8</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2016-9063</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">9.8</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2016-9063</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">9.8</span>
<span class="cvss-vector">CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2022-43680</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2022-43680</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2022-43680</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2023-52425</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.5</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2023-52425</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2023-52425</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2024-8176</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.7</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2024-8176</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2024-8176</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2025-59375</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.2</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2025-59375</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2025-59375</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-102633</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.2</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-102633</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-102633</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">8.2</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-102633</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-24515</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.8</span>
<span class="cvss-vector">CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-24515</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.5</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-24515</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">2.5</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-24515</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">2.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-25210</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.3</span>
<span class="cvss-vector">CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-25210</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-25210</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.8</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-25210</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-32776</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.7</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-32776</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-32776</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">4.0</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-32776</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.5</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-32777</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.7</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-32777</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-32777</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">4.0</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-32777</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.5</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-32778</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.2</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-32778</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-32778</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">2.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-32778</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.5</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-41080</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">2.0</span>
<span class="cvss-vector">CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-41080</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">2.5</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-41080</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">2.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-41080</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-45186</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">2.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-45186</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">2.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-45186</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-45186</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-50219</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">4.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-50219</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">4.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-50219</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56131</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">4.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56131</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">4.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56132</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56132</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56132</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56403</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56403</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56403</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56404</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56404</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56404</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56405</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56405</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56405</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56406</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56406</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56407</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56407</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56408</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56408</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56409</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">4.5</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56409</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56410</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.3</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56410</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56411</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56411</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56412</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">4.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56412</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">4.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-56412</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-66046</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.7</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-66046</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-66046</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">8.7</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-66046</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-72522</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.2</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-72522</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-72522</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.2</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-76641</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-76641</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">8.7</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-76641</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-76956</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-76956</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-76956</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-76957</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">4.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-76957</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.8</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-76957</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">4.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-77214</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.8</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-77214</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.2</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-77214</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">8.3</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-77214</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">8.2</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-93990</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-93990</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">8.7</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-93990</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N</span>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">openSUSE Leap 15.4</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing LTSS 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing LTSS 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise Micro 5.3</li>
<li class="list-group-item">SUSE Linux Enterprise Micro 5.4</li>
<li class="list-group-item">SUSE Linux Enterprise Micro 5.5</li>
<li class="list-group-item">SUSE Linux Enterprise Micro for Rancher 5.3</li>
<li class="list-group-item">SUSE Linux Enterprise Micro for Rancher 5.4</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP4 LTSS</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP5 LTSS</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP6</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP6 LTSS</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP6</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that solves 34 vulnerabilities and contains one feature can now be installed.</p>
<h2>Description:</h2>
<p>This update for expat fixes the following issues:</p>
<ul>
<li>CVE-2025-59375: denial of service (resource consumption) caused by processing malformed small documents (bsc#1249584).</li>
<li>CVE-2026-24515: NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the
encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser (bsc#1257144).</li>
<li>CVE-2026-25210: lack of buffer size check can lead to an integer overflow (bsc#1257496).</li>
<li>CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity
declaration value (bsc#1259726).</li>
<li>CVE-2026-32777: denial of service due to infinite loop in DTD content parsing (bsc#1259711).</li>
<li>CVE-2026-32778: NULL pointer dereference in <code>setContext</code> on retry after an out-of-memory condition
(bsc#1259729).</li>
<li>CVE-2026-41080: crafted XML document can cause a denial of service (bsc#1262263).</li>
<li>CVE-2026-45186: denial of service via moderately sized crafted XML input (bsc#1264713).</li>
<li>CVE-2026-50219: lack of handler call depth tracking for calls to XML_* functions from within handlers in cases of a
policy violation (bsc#1267631).</li>
<li>CVE-2026-56131: lack of handler call depth tracking for calls to XML_ResumeParser from within
handlers in cases of a policy violation (bsc#1268572).</li>
<li>CVE-2026-56132: heap-based buffer overflow in doProlog in xmlparse.c (bsc#1268573).</li>
<li>CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-56406,
CVE-2026-56407,CVE-2026-56408,CVE-2026-56409,CVE-2026-56410,
CVE-2026-56411,CVE-2026-56412: multiple integer overflow vulnerabilities (bsc#1275115).</li>
<li>CVE-2026-66046: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts()
function (bsc#1275732).</li>
<li>CVE-2026-72522: out-of-bounds read and resultant infinite loop due to low surrogates being treated the same
as high surrogates during Unicode processing (bsc#1275594).</li>
<li>CVE-2026-76641: out-of-bounds read vulnerability that allows attackers to trigger
memory corruption (bsc#1275915).</li>
<li>CVE-2026-76956: denial of service via hash flooding attacks (bsc#1275860).</li>
<li>CVE-2026-76957: lack of handler call depth tracking with custom encoding callbacks. Thus, a use-
after-free can occur (bsc#1275859).</li>
<li>CVE-2026-77214: out-of-bounds read due to insufficient checks in <code>XML_ParseBuffer()</code> (bsc#1284334).</li>
<li>CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347).</li>
<li>CVE-2026-102633: Denial of Service via integer overflow in expat_realloc (bsc#1283493).</li>
</ul>
<p>Update to 2.8.5 (jsc#PED-16154):</p>
<ul>
<li>Bug fixes:</li>
<li>Fix an OOM-related memory leak on a failed overflow check</li>
<li>Fix memory alignment for architectures with 128bit pointers</li>
<li>Mark XML_SetHashSalt deprecated</li>
<li>CMake: only add /source-charset:utf-8 when /utf-8 is not present</li>
<li>lib: resolve undefined behavior from overshifting a signed int</li>
<li>lib: support read-only hash table lookup with non-zero-terminated
keys</li>
<li>lib: use a C99 bool for ENTITY.open</li>
<li>version info bumped from 13:3:12 to 13:4:12</li>
<li>fix support for 2+ GiB documents (regression from 2.8.2)</li>
<li>reject empty version in the XML declaration</li>
<li>fix printf format for AIX</li>
<li>CMake|AIX: enable EXPAT_DEV_URANDOM by default</li>
<li>version info bumped from 13:2:12 to 13:3:12</li>
<li>Existing API function XML_SetHashSalt is now deprecated</li>
<li>because of its limitations, and its use should be</li>
<li>considered a vulnerability. Please either use the new API</li>
<li>function XML_SetHashSalt16Bytes (with known-high-quality</li>
<li>entropy input only!) instead, or leave the derivation of</li>
<li>a 16-bytes hash salt from high quality entropy to Expat's</li>
<li>internal machinery (by <em>not</em> calling either of the two</li>
<li>XML_SetHashSalt* functions).</li>
<li>xmlwf: Fix a memory leak</li>
<li>WASI: Fix format specifiers for 32bit WASI SDK</li>
<li>Fix alignment of internal allocations for some non-amd64
architectures (e.g. sparc32); fixes up on the fix to
CVE-2025-59375 (of Expat 2.7.2)</li>
<li>Fix a class of false positives where input should have been
rejected with error XML_ERROR_ASYNC_ENTITY; regression from
CVE-2024-8176 (of Expat 2.7.0)</li>
<li>Prove and regression-proof absence of integer overflow
from function expat_realloc</li>
<li>Remove "harmless" cast that truncated a size_t to unsigned</li>
<li>xmlwf: Resolve use of functions XML_GetErrorLineNumber
and XML_GetErrorColumnNumber</li>
<li>CVE-2025-59375 -- Disallow use of disproportional amounts of
dynamic memory from within an Expat parser</li>
<li>xmlwf: Fix (internal) help generator</li>
<li>xmlwf: Mention supported environment variables in</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Linux Enterprise Server for SAP Applications 15 SP4
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4623</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
<br/>
<code>zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4623</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
<br/>
<code>zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4623</code>
</li>
<li class="list-group-item">
openSUSE Leap 15.4
<br/>
<code>zypper in -t patch SUSE-2026-4623</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Micro for Rancher 5.3
<br/>
<code>zypper in -t patch SUSE-SLE-Micro-5.3-2026-4623</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Micro 5.3
<br/>
<code>zypper in -t patch SUSE-SLE-Micro-5.3-2026-4623</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server for SAP Applications 15 SP5
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4623</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
<br/>
<code>zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4623</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
<br/>
<code>zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4623</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Micro for Rancher 5.4
<br/>
<code>zypper in -t patch SUSE-SLE-Micro-5.4-2026-4623</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Micro 5.4
<br/>
<code>zypper in -t patch SUSE-SLE-Micro-5.4-2026-4623</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server for SAP Applications 15 SP6
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4623</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Micro 5.5
<br/>
<code>zypper in -t patch SUSE-SLE-Micro-5.5-2026-4623</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server 15 SP4 LTSS
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4623</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server 15 SP5 LTSS
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4623</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server 15 SP6 LTSS
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4623</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64)
<ul>
<li>libexpat1-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-2.8.5-150400.3.40.1</li>
<li>libexpat1-2.8.5-150400.3.40.1</li>
<li>expat-debugsource-2.8.5-150400.3.40.1</li>
<li>libexpat-devel-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64)
<ul>
<li>expat-32bit-debuginfo-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64)
<ul>
<li>libexpat1-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-2.8.5-150400.3.40.1</li>
<li>libexpat1-2.8.5-150400.3.40.1</li>
<li>expat-debugsource-2.8.5-150400.3.40.1</li>
<li>libexpat-devel-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64)
<ul>
<li>expat-32bit-debuginfo-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64)
<ul>
<li>libexpat1-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-2.8.5-150400.3.40.1</li>
<li>libexpat1-2.8.5-150400.3.40.1</li>
<li>expat-debugsource-2.8.5-150400.3.40.1</li>
<li>libexpat-devel-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64)
<ul>
<li>expat-32bit-debuginfo-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64)
<ul>
<li>libexpat1-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-2.8.5-150400.3.40.1</li>
<li>libexpat1-2.8.5-150400.3.40.1</li>
<li>expat-debugsource-2.8.5-150400.3.40.1</li>
<li>libexpat-devel-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
openSUSE Leap 15.4 (x86_64)
<ul>
<li>libexpat-devel-32bit-2.8.5-150400.3.40.1</li>
<li>expat-32bit-debuginfo-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
openSUSE Leap 15.4 (aarch64_ilp32)
<ul>
<li>expat-64bit-debuginfo-2.8.5-150400.3.40.1</li>
<li>libexpat1-64bit-debuginfo-2.8.5-150400.3.40.1</li>
<li>libexpat1-64bit-2.8.5-150400.3.40.1</li>
<li>libexpat-devel-64bit-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64)
<ul>
<li>libexpat1-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-debugsource-2.8.5-150400.3.40.1</li>
<li>expat-debuginfo-2.8.5-150400.3.40.1</li>
<li>libexpat1-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64)
<ul>
<li>libexpat1-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-debugsource-2.8.5-150400.3.40.1</li>
<li>expat-debuginfo-2.8.5-150400.3.40.1</li>
<li>libexpat1-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64)
<ul>
<li>libexpat1-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-2.8.5-150400.3.40.1</li>
<li>libexpat1-2.8.5-150400.3.40.1</li>
<li>expat-debugsource-2.8.5-150400.3.40.1</li>
<li>libexpat-devel-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64)
<ul>
<li>expat-32bit-debuginfo-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64)
<ul>
<li>libexpat1-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-2.8.5-150400.3.40.1</li>
<li>libexpat1-2.8.5-150400.3.40.1</li>
<li>expat-debugsource-2.8.5-150400.3.40.1</li>
<li>libexpat-devel-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64)
<ul>
<li>expat-32bit-debuginfo-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64)
<ul>
<li>libexpat1-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-2.8.5-150400.3.40.1</li>
<li>libexpat1-2.8.5-150400.3.40.1</li>
<li>expat-debugsource-2.8.5-150400.3.40.1</li>
<li>libexpat-devel-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64)
<ul>
<li>expat-32bit-debuginfo-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64)
<ul>
<li>libexpat1-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-debugsource-2.8.5-150400.3.40.1</li>
<li>expat-debuginfo-2.8.5-150400.3.40.1</li>
<li>libexpat1-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64)
<ul>
<li>libexpat1-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-debugsource-2.8.5-150400.3.40.1</li>
<li>expat-debuginfo-2.8.5-150400.3.40.1</li>
<li>libexpat1-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)
<ul>
<li>libexpat1-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-2.8.5-150400.3.40.1</li>
<li>libexpat1-2.8.5-150400.3.40.1</li>
<li>expat-debugsource-2.8.5-150400.3.40.1</li>
<li>libexpat-devel-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64)
<ul>
<li>expat-32bit-debuginfo-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64)
<ul>
<li>libexpat1-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-debugsource-2.8.5-150400.3.40.1</li>
<li>expat-debuginfo-2.8.5-150400.3.40.1</li>
<li>libexpat1-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64)
<ul>
<li>libexpat1-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-2.8.5-150400.3.40.1</li>
<li>libexpat1-2.8.5-150400.3.40.1</li>
<li>expat-debugsource-2.8.5-150400.3.40.1</li>
<li>libexpat-devel-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64)
<ul>
<li>expat-32bit-debuginfo-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)
<ul>
<li>libexpat1-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-2.8.5-150400.3.40.1</li>
<li>libexpat1-2.8.5-150400.3.40.1</li>
<li>expat-debugsource-2.8.5-150400.3.40.1</li>
<li>libexpat-devel-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64)
<ul>
<li>expat-32bit-debuginfo-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64)
<ul>
<li>libexpat1-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-debuginfo-2.8.5-150400.3.40.1</li>
<li>expat-2.8.5-150400.3.40.1</li>
<li>libexpat1-2.8.5-150400.3.40.1</li>
<li>expat-debugsource-2.8.5-150400.3.40.1</li>
<li>libexpat-devel-2.8.5-150400.3.40.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64)
<ul>
<li>expat-32bit-debuginfo-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-2.8.5-150400.3.40.1</li>
<li>libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://www.suse.com/security/cve/CVE-2016-0718.html">https://www.suse.com/security/cve/CVE-2016-0718.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2016-9063.html">https://www.suse.com/security/cve/CVE-2016-9063.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2022-43680.html">https://www.suse.com/security/cve/CVE-2022-43680.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2023-52425.html">https://www.suse.com/security/cve/CVE-2023-52425.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2024-8176.html">https://www.suse.com/security/cve/CVE-2024-8176.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2025-59375.html">https://www.suse.com/security/cve/CVE-2025-59375.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-102633.html">https://www.suse.com/security/cve/CVE-2026-102633.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-24515.html">https://www.suse.com/security/cve/CVE-2026-24515.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-25210.html">https://www.suse.com/security/cve/CVE-2026-25210.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-32776.html">https://www.suse.com/security/cve/CVE-2026-32776.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-32777.html">https://www.suse.com/security/cve/CVE-2026-32777.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-32778.html">https://www.suse.com/security/cve/CVE-2026-32778.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-41080.html">https://www.suse.com/security/cve/CVE-2026-41080.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-45186.html">https://www.suse.com/security/cve/CVE-2026-45186.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-50219.html">https://www.suse.com/security/cve/CVE-2026-50219.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-56131.html">https://www.suse.com/security/cve/CVE-2026-56131.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-56132.html">https://www.suse.com/security/cve/CVE-2026-56132.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-56403.html">https://www.suse.com/security/cve/CVE-2026-56403.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-56404.html">https://www.suse.com/security/cve/CVE-2026-56404.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-56405.html">https://www.suse.com/security/cve/CVE-2026-56405.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-56406.html">https://www.suse.com/security/cve/CVE-2026-56406.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-56407.html">https://www.suse.com/security/cve/CVE-2026-56407.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-56408.html">https://www.suse.com/security/cve/CVE-2026-56408.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-56409.html">https://www.suse.com/security/cve/CVE-2026-56409.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-56410.html">https://www.suse.com/security/cve/CVE-2026-56410.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-56411.html">https://www.suse.com/security/cve/CVE-2026-56411.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-56412.html">https://www.suse.com/security/cve/CVE-2026-56412.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-66046.html">https://www.suse.com/security/cve/CVE-2026-66046.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-72522.html">https://www.suse.com/security/cve/CVE-2026-72522.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-76641.html">https://www.suse.com/security/cve/CVE-2026-76641.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-76956.html">https://www.suse.com/security/cve/CVE-2026-76956.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-76957.html">https://www.suse.com/security/cve/CVE-2026-76957.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-77214.html">https://www.suse.com/security/cve/CVE-2026-77214.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-93990.html">https://www.suse.com/security/cve/CVE-2026-93990.html</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1249584">https://bugzilla.suse.com/show_bug.cgi?id=1249584</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1257144">https://bugzilla.suse.com/show_bug.cgi?id=1257144</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1257496">https://bugzilla.suse.com/show_bug.cgi?id=1257496</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1259711">https://bugzilla.suse.com/show_bug.cgi?id=1259711</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1259726">https://bugzilla.suse.com/show_bug.cgi?id=1259726</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1259729">https://bugzilla.suse.com/show_bug.cgi?id=1259729</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1262263">https://bugzilla.suse.com/show_bug.cgi?id=1262263</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1264713">https://bugzilla.suse.com/show_bug.cgi?id=1264713</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1267631">https://bugzilla.suse.com/show_bug.cgi?id=1267631</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268572">https://bugzilla.suse.com/show_bug.cgi?id=1268572</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268573">https://bugzilla.suse.com/show_bug.cgi?id=1268573</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1275115">https://bugzilla.suse.com/show_bug.cgi?id=1275115</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1275594">https://bugzilla.suse.com/show_bug.cgi?id=1275594</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1275732">https://bugzilla.suse.com/show_bug.cgi?id=1275732</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1275859">https://bugzilla.suse.com/show_bug.cgi?id=1275859</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1275860">https://bugzilla.suse.com/show_bug.cgi?id=1275860</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1275915">https://bugzilla.suse.com/show_bug.cgi?id=1275915</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1282347">https://bugzilla.suse.com/show_bug.cgi?id=1282347</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1283493">https://bugzilla.suse.com/show_bug.cgi?id=1283493</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1284334">https://bugzilla.suse.com/show_bug.cgi?id=1284334</a>
</li>
<li>
<a href="https://jira.suse.com/browse/PED-16154">https://jira.suse.com/browse/PED-16154</a>
</li>
</ul>
</div>